Skip to content
Threat Feed
Subscribe

Vendor

MemberPress

1 brief RSS
high advisory

Privilege Escalation in MemberPress Corporate Accounts WordPress Plugin

The MemberPress Corporate Accounts plugin for WordPress contains a mass assignment vulnerability that allows authenticated users with corporate sub-account privileges to escalate to administrator by injecting unauthorized fields during user creation.

MemberPress Corporate Accounts wordpress privilege-escalation vulnerability
1t 1c